Crestron CEN-GW1 User manual

CEN-GW1andCENI-GW1UniversalWirelessGateway,ERWireless,SGWireless,andinfiNETEX®WirelessGateway

ProductManualCrestronElectronics,Inc.

OriginalInstructionsTheU.S.Englishversionofthisdocumentistheoriginalinstructions.Allotherlanguagesareatranslationoftheoriginalinstructions.RegulatoryModel:M201913001CrestronproductdevelopmentsoftwareislicensedtoCrestrondealersandCrestronServiceProviders(CSPs)underalimitednonexclusive,nontransferableSoftwareDevelopmentToolsLicenseAgreement.CrestronproductoperatingsystemsoftwareislicensedtoCrestrondealers,CSPs,andend-usersunderaseparateEnd-UserLicenseAgreement.BothoftheseAgreementscanbefoundontheCrestronwebsiteatwww.crestron.com/legal/software_license_agreement.Theproductwarrantycanbefoundatwww.crestron.com/warranty.ThespecificpatentsthatcoverCrestronproductsarelistedatwww.crestron.com/legal/patents.CertainCrestronproductscontainopensourcesoftware.Forspecificinformation,visitwww.crestron.com/opensource.Crestron,theCrestronlogo,CrestronToolbox,andinfiNETEXareeithertrademarksorregisteredtrademarksofCrestronElectronics,Inc.intheUnitedStatesand/orothercountries.ActiveDirectoryiseitheratrademarkorregisteredtrademarkofMicrosoftCorporationintheUnitedStatesand/orothercountries.Othertrademarks,registeredtrademarks,andtradenamesmaybeusedinthisdocumenttorefertoeithertheentitiesclaimingthemarksandnamesortheirproducts.Crestrondisclaimsanyproprietaryinterestinthemarksandnamesofothers.Crestronisnotresponsibleforerrorsintypographyorphotography.©2021CrestronElectronics,Inc.THIS DEVICE COMPLIES WITH PART 15 OF THE FCC RULES. OPERATION IS SUBJECT TO THE FOLLOWING TWO CONDITIONS: (1) THIS DEVICE MAY NOT CAUSE HARMFUL INTERFERENCE, AND (2) THIS DEVICE MUST ACCEPT ANY INTERFERENCE RECEIVED, INCLUDING INTERFERENCE THAT MAY CAUSE UNDESIRED OPERATIONNOTE: THE GRANTEE IS NOT RESPONSIBLE FOR ANY CHANGES OR MODIFICATIONS NOT EXPRESSLY APPROVED BY THE PARTY RESPONSIBLE FOR COMPLIANCE. SUCH MODIFICATIONS COULD VOID THE USER’S AUTHORITY TO OPERATE THE EQUIPMENT.This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device.Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en compromettre le fonctionnement.NOTE: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:- Reorient or relocate the receiving antenna.- Increase the separation between the equipment and receiver.-Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.-Consult the dealer or an experienced radio/TV technician for help.

ContentsWebConfiguration1Status2Device2Network3ControlSystem3AcquiredDevices3Settings4SystemSetup4RadioSetup6Security9802.1xConfiguration13TurnOnIEEE802.1xAuthentication13SelectanAuthenticationMethod13ServerValidation13Action14Reboot15Restore15UpdateFirmware15DownloadLogs15ManageCertificates15SaveChanges17Revert17LogOut18ProductManual—Doc.8661AContents•i

ii•ContentsProductManual—Doc.8661A

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•1WebConfigurationMonitorandconfiguretheCEN-GW1andCENI-GW1usingthebuilt-inwebconfigurationinterface.Toaccessthewebconfiguration:1.UsetheDeviceDiscoverytoolinCrestronToolbox™softwaretodiscoverthedeviceanditsIPaddressonthenetwork.2.Inawebbrowser,gototheIPaddressofthedevice.NOTE:Ifauthenticationisenabledforthegateway,anadministratorusernameandpasswordmustbeenteredpriortoaccessingthewebconfigurationinterface.Formoreinformationonconfiguringauthenticationsettings,refertoAuthentication.Thewebconfigurationprovidestabstoviewandconfiguredevicesettings.Thesetabsareprovided:Status2Settings4Security9802.1xConfiguration13Action14LogOut18

2•CEN-GW1andCENI-GW1ProductManual—Doc.8661AStatusUsetheStatustabtoviewthedeviceinformation.DeviceUsethedevicemenutoviewgeneraldeviceinformationsuchastheModel,SerialNumber,andFirmwareVersion.SelectMoreDetailstoviewdetaileddeviceinformationsuchastheBuild,Bootloader,BuildTime,andmore.

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•3NetworkUsetheNetworkmenutoviewtheHostName,DomainName,andDNSServers.SelectAdapter1toviewdetailednetworkinformationsuchasDHCP,IPAddress,andSubnetMask.networksettingsofthedevice.ControlSystemUsetheControlSystemmenutoviewtheconnectionstatustoacontrolsystem.AcquiredDevicesUsetheAcquiredDevicesmenutoviewtheSG,ER,andinfiNETEXwirelessdevicesthatareacquiredbythegateway.

4•CEN-GW1andCENI-GW1ProductManual—Doc.8661ASettingsDeletethistextandreplaceitwithyourowncontent.SystemSetupUsetheSystemSetupmenutoconfiguretheNetwork,AutoUpdate,andControlSystemsettings.NetworkUsetheNetworkmenutoconfiguretheconnectiontotheEthernetnetwork.DHCPisturnedonbydefaultandthefieldsareautomaticallypopulated.Tosetcustomethernetsettings:1.DeselectDHCP.2.EntertheDomain,PrimaryStaticDNS,andSecondaryStaticDNSinformation.

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•53.EntertheIPAddress,SubnetMask,andDefaultGatewayinformation.4.IntheActionsmenu,selectSaveChanges.AutoUpdateUsetheAutoUpdatemenutoconfigureautoupdatesettings.AutoUpdateisturnedonbydefaultandthefieldsareautomaticallypopulated.ClickAutoUpdatetoconfiguretime-basedauto-updateoffirmware/apkorimmediateupdate.Tosettheautoupdatetimebasedondayofweekandtime:1.SelectadayfromtheDayofWeekdrop-downmenu.Tocheckforupdateseveryday,selectDaily.2.Enteratimebasedonthe24-hourclockintheTimeofDaybox.3.IntheActionsmenu,selectSaveChanges.Tosettheautoupdatebasedonpollinterval:NOTE:Anon-zerovalueinthePollInterval(Minutes)boxoverridestheDayOfWeekandTimeOfDayconfiguration.1.Enteratime,inminutes,intothePollIntervalbox.Therangeis1minuteto65535minutes.2.IntheActionsmenu,selectSaveChanges.TouseacustomautoupdateURL:NOTE:DonotchangethedefaultURLunlessadvisedbyaCrestronTechSupportSpecialist.1.SelectCustomURL.2.EnteraURLtoafirmwareserverintheCustomURLPathbox.ThedevicewillconnecttothefirmwareserverprovidedintheCustomURLPathatthescheduledtime.ClickCheckforUpdatebesideUpdateFirmwareNowand/orUpdateAPKNowtotriggertheupgradeprocessimmediately.

6•CEN-GW1andCENI-GW1ProductManual—Doc.8661AControlSystemTBDlWhyEncryptConnection?lWhatistheusername?lwhatisthepassword?lWhatistheIPTableRadioSetupUsetheRadioSetupmenutoconfiguretheSG,ER,andinfiNETEXwirelessradiosandtoacquiredevices.SelectRFChannelSettheRFchannelsfortheEX/ERradioandtheSGradio:NOTE:ScanthewirelessnetworktodeterminethebestRFchannelfortheEX/ERandSGradios.Fordetails,refertoSettings(onpage4).lSelectanEXandERchannelfromtheEXChanneldrop-downmenu.lSelectanSGchannelfromtheSGChanneldrop-downmenu.

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•7AcquireDevicesToacquiredevicestothegateway:NOTES:lPlacethegatewayintoacquiremodepriortoenteringAcquiremodeonawirelessdevice.lOnlyonegatewaycanbeinAcquiremodeatatime.1.ClickStartAcquiretoenterAcquiremode.2.OnanSG,ER,orinfiNETEXwirelessdevice,enterAcquiremode.Fordetails,refertothewirelessdevice'sinstructions.3.Afterallwirelessdevicesareacquired,selectStopAcquiretoexitAcquiremode.FindChannels-WhatdoesFindChannelsdo?EX/ERDevicesThedevicesthatareacquiredtotheEXandERradioaredisplayedalongwiththeenergyscanchart.Toscanthewirelessnetwork:1.IntheEX/ERDevices,selectStartScan.2.ThewirelessnetworkisscannedanddisplaystheEnergy(dBm)fortheChannels.

8•CEN-GW1andCENI-GW1ProductManual—Doc.8661ASGDevicesThedevicesthatareacquiredtotheSGradioaredisplayedalongwiththeenergyscanchart.Toscanthewirelessnetwork:1.IntheSGDevicesmenu,selectStartScan.2.ThewirelessnetworkisscannedanddisplaystheEnergy(dBm)fortheChannels.

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•9SecurityClicktheSecuritytabtoconfiguresecurityforusersandgroupsandtoallowdifferentlevelsofaccesstothefunctionsofthedevice.SSLWhychangeSSLmode?WhatdoesSSLModedo?SelectamodefromtheSSLModedrop-downmenu.lEncryptandValidation:ThegatewaywillrequireausernameandpasswordtovalidateanencryptedSSLconnection.lEncrypt:ThegatewaywilluseanencryptedSSLconnectionlOFF:ThegatewaywillnotuseanSSLconnection.IsSSLAuthenticationonlyavailableforEncryptandValidation??TosettheSSLAuthentication,entertheUsername,Password,andConfirmPassword.

10•CEN-GW1andCENI-GW1ProductManual—Doc.8661ACurrentUserUsetheCurrentUsertabtoviewthecurrentuser'sName,AccessLevel,ActiveDirectoryUserstatus,andGroups.Thepasswordforthecurrentusercanalsobechanged.Tochangethecurrentuser’spassword:1.ClickChangeCurrentUserPassword.2.Enterthecurrentuser'spasswordintheCurrentPasswordbox.3.EnteranewpasswordinthePasswordandConfirmPasswordboxes.4.ClickYes.UsersUsetheUserstabtomanageauthorizedusers.Alistofauthorizedusersisdisplayed.ClickInformationtoviewdetailsaboutauser.EditaUser1.ClickEdit.2.IftheuserisamemberoftheActiveDirectory®credentialmanagementgroup,selectActiveDirectoryUser.3.EnterapasswordinthePasswordandConfirmPasswordboxes.4.SelectagroupfromtheGroupdrop-downmenu.5.ClickYes.DeleteaUserNOTE:TheAdminusercannotbedeleted.1.ClickDelete.2.Intheconfirmationdialog,clickYes.

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•11CreateaUser1.ClickCreateUser.2.EnteraUsernameintheNamebox.3.IftheuserisamemberoftheActiveDirectory®credentialmanagementgroup,selectActiveDirectoryUser.4.ClickYes.GroupsSelecttheGroupstabtoconfigureusergroups.Alistofusergroupsisdisplayed.ClickInformationtoviewdetailsaboutagroup.DeleteaGroup1.ClickDelete.2.Intheconfirmationdialog,clickYes.

12•CEN-GW1andCENI-GW1ProductManual—Doc.8661ACreateaGroup1.ClickCreateGroup.2.EnteraGroupNameintheNamebox.3.SelectanaccesslevelfromtheAccessLeveldrop-downmenu.4.IftheuserisamemberoftheActiveDirectory®credentialmanagementgroup,selectActiveDirectoryUser.5.ClickYes.

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•13802.1xConfigurationThe802.1XstandardisanIEEEnetworkstandarddesignedtoenhancethesecurityofwirelessandEthernetLANs.Thestandardreliesontheexchangeofmessagesbetweenthedeviceandthenetwork'shost,orauthenticationserver.Thedevicehasbuilt-insupportforthe802.1Xstandardtoallowcommunicationwiththeauthenticationserverandaccesstoprotectedcorporatenetworks.EnableIEEE802.1xConfigurationandselectthedesiredmethodofauthentication.TurnOnIEEE802.1xAuthenticationToturnonauthentication,selectIEEE802.1xAuthentication.SelectanAuthenticationMethodToselectanauthenticationmethod,selectEAP-TLSCertificateorEAPMSCHAPV2-passwordfromtheAuthenticationMethoddrop-downmenu.IfEAPMSCHAPV2-passwordisselected,entertheDomain,Username,andPassword.ServerValidationToturnonservervalidation:1.SelectEnableAuthenticationServerValidation.2.SelectcertificatesfromtheSelectedTrustedCertificateAuthoritieslist.NOTE:Toloadacustomcertificate,gotoActions>ManageCertificates.Fordetails,refertoManageCertificates(onpage15).

14•CEN-GW1andCENI-GW1ProductManual—Doc.8661AActionTheActiondrop-downmenuisdisplayedatthetoprightsideoftheinterfaceandprovidesquickaccesstocommondevicefunctions,suchas:lRebootlRestorelUpdateFirmwarelDownloadLogslManageCertificateslSaveChangeslRevertOnceanychangeshavebeenmadetothedeviceconfiguration,theActionbuttonchangestoaSaveChangesbutton.ClickSaveChangestosavechangestotheconfigurationsettings.Ifarebootisrequiredafterchangeshavebeensaved,adialogboxisdisplayedaskingwhethertherebootshouldbeperformed.SelectOKtorebootthedeviceorCanceltocancelthereboot.TheActionmenuprovidesthefollowingselections.

ProductManual—Doc.8661ACEN-GW1andCENI-GW1•15RebootTorestartthegateway,selectRebootandthenYes,RebootNow.RestoreTorestorethedevicesettingstotheirfactorydefault,selectRestoreandthenYestoconfirm.UpdateFirmwareToupgradethedevicefirmware:NOTE:Donotturnoffthedeviceorstoptheupgradeprocessuntilthedeviceisupgraded.Aftertheupgrade,thedevicewillreboot.NOTE:Fortime-basedautoupdateofthefirmware,refertotheAutoUpdate(onpage5).1.Visitwww.crestron.com/firmwareanddownloadthelatestfirmware.2.SelectUploadFirmwareandthenselectBrowse.3.SelectthefirmwarefileandthenselectOpen.4.Touploadthefirmware,selectLoad.DownloadLogsDownloadlogfilesfordiagnosticpurposes.Thelogfilesarestoredinacompressed.tgzfile,extractthelogfilestoviewthem.Todownloadlogs,selectDownloadLogs.ManageCertificatesClickManageCertificatesintheActiondrop-downmenutoadd,removeandmanagecertificatesusedin802.1xandotherprotectednetworks.Thefollowingcertificatetabsaredisplayed: